Mirai warning email

[martyp]

Hi all,

I had an email today saying that on the 17th a detection of Mirai was found from a device or devices on my network.

I've done netstat and checked logs on my router and can't see any activity on the ports referenced online. I have seen references to Hub 3 being a target and one person simply powering their hub off and on to clear the bot. I do have IP cameras but none have default passwords. I have a number of devices on my network and my own router so using the VM hub in modem mode.

It would be good to have any advice to try and resolve this and trace the cause of the issue and also if I would get any more email notifications from Virgin Media if the issue still remains?

Many thanks

[Kath_F]

Hi martyp, 

Thanks for your post and apologies to hear you've received an email advising that you have a malware infection. 

You can find all the information we have on this here. 

There is a specific topic on the Mirai malware too. 

If you have any further queries or questions, please pop back and let us know. 

Thanks, 

[martyp]

Thanks Kath, what I'd like to try and work out is if I still have it or if it's gone? I work in IT support so ensure my laptop is fully protected and am prone to cheap gadgets from abroad and have lots of things on my network. I understand this infects LInux devices such as webcams so have been checking traffic and open ports etc. on the router and can't see any issues. I have also rebooted all suspected equipment as well, I can't see any traffic on the ports associated with Mirai. I suspect it could be a webcam possibly and have narrowed down to one or two which were more cheap and cheerful which although they have good passwords on them may have inherent vulnerabilities in their OSs.

How often would I receive these letters/emails if I still had it on my network?

[Steven_L]

Thanks for coming back to us @martyp, I will check with the team to try and find out how often you would get the messages, if your devices are still infected with the malware.

I will get back to you as soon as I have an update.

Regards,

Steven_L